SA 3.1.0 scoring a lot of messages on this list rather high..

Matt Kettler mkettler at EVI-INC.COM
Fri Dec 2 18:45:31 GMT 2005


    [ The following text is in the "ISO-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

It would appear that references to the wiki cause a strong-scoring SA 3.1.0 rule
to fire off. "URI_NO_WWW_INFO_CGI", which matches URIs to CGI scripts in the
info tld that don't start with www.  wiki.mailscanner.info matches the hostname
requirements, and direct links to various PHP sub-pages containing a ? cause a
match for the cgi part.


This rule scores rather high, particularly for set3 users:
score URI_NO_WWW_INFO_CGI 3.280 3.241 3.792 4.100

And it double-fires with INFO_TLD:

score INFO_TLD 1.373 0.813 1.457 1.273

Giving messages with links to the wiki a >5.3 point penalty just for linking
articles in the wiki (rather harsh).  This is contributing to some FPs on this
list.

Users might want to check and either whitelist this list, or adjust the scores
of those rules.

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!



More information about the MailScanner mailing list